ZyXEL Communications ZyWall USG 50-H Series, User Manual

Page: 85 / 704

Chapter 5 Configuration Basics
ZyWALL USG 50-H User’s Guide
85
Example: See Chapter 6 on page 93 .
5.4.6 L2TP VPN
Use L2TP VPN to let remote users use the L2TP and IPSec client software included with their
computers’ operating systems to securely connect to the network behind the ZyWALL.
Example: See Chapter 25 on page 369 .
5.4.7 Zones
See Section 5.2 on page 80 for background information. A zone is a group of interfaces and
VPN tunnels. The ZyWALL uses zones, not interfaces, in many security settings, such as
firewall rules and remote management.
Zones cannot overlap. Each interface and VPN tunnel can be assigned to at most one zone.
Virtual interfaces are automatically assigned to the same zone as the interface on which they
run.
Example: To change the DMZ port to being in the LAN1 zone, click Network > Zone and
then the DMZ Edit icon. Remove the DMZ interface from the DMZ zone and click Apply .
Then click the LAN1 Edit icon and add the DMZ interface and click Apply .
5.4.8 DDNS
Dynamic DNS maps a domain name to a dynamic IP address. The ZyWALL helps maintain
this mapping.
5.4.9 Policy Routes
Use policy routes to control the routing of packets through the ZyWALL’s interfaces, trunks,
and send traffic through VPN connections. You also use policy routes for bandwidth
management (out of the ZyWALL), port triggering, and general NAT on the source address.
You have to set up the criteria, next-hops, and NAT settings in other screens first.
MENU ITEM(S)
VPN > L2TP VPN
PREREQUISITES
Interfaces, IPSec VPN connection, certificates (authentication), authentication
methods (extended authentication), addresses (local network, remote network,
NAT, IP pool for assigning to clients, DNS and WINS server addresses), to-
ZyWALL firewall, firewall
WHERE USED
The IPSec VPN connection used for L2TP VPN can be used in policy routes and
zones
MENU ITEM(S)
Network > Zone
PREREQUISITES
Interfaces, IPSec VPN, SSL VPN
WHERE USED
Firewall, remote management, ADP, application patrol
MENU ITEM(S)
Network > DDNS
PREREQUISITES
Interface
MENU ITEM(S)
Network > Routing > Policy Route